API
API reference
The REST API, grouped the way the OpenAPI document tags it. Each page lists its operations with method and path, and who may call them.
- Base URL
- https://rolodex-api.fleetworks.dev
- Areas
- 10
- Operations
- 65
- LDAP Sync Cache10 opsThe external directory-lookup contract (swagger.json): users by any identifier, search, lists and groups.
- Directory admin9 opsPublish and unpublish users and groups, and manage native rows.
- Sync sources6 opsConfigure the upstream sources that feed the directory, and start or inspect sync runs.
- Access provisioning16 opsAccess targets, access bindings, external identities and access runs: group membership as access on outside platforms.
- Webhooks6 opsRegister endpoints for signed events, send a test event and read deliveries.
- Service-account PATs3 opsLong-lived machine credentials with the dg_ prefix. The UI labels them API keys.
- Moderation6 opsReports on users and groups, the review queue, and personal blocks.
- Org members2 opsPeople waiting for access after their first sign-in, and granting them an Org role.
- Me2 opsYour own EULA acceptance.
- Zitadel reconciliation5 opsMatch Zitadel accounts to directory users, and review or override those links.
Outside the spec
The API also serves these routes, which the vendored OpenAPI document does not list.
- GET/keys/{username_or_group_name}SSH keys lookup for a user, or for every member of a grouporg:contributor or above
- GET/public/searchSearch published users and groups (q, type=users|groups|all), personal fields removedNo credentials, rate limited
- POST/api/advisory/analyzeRun the security advisory over the public projectionorg:admin; answers 503 when no model key is configured
- GET/public/healthPublic surface healthNo credentials
- GET/healthAPI health checkNo credentials
- GET/openapi.jsonThe full live OpenAPI 3.1 documentNo credentials